Cybersecurity

Category Added in a WPeMatico Campaign

Cybersecurity

The Duck is Hiring in Italy: DUCKTAIL Spread via Compromised LinkedIn Profiles

By Cluster25 Threat Intel TeamOctober 25, 2023 Cluster25 observed a malicious campaign that employs LinkedIn messages as a vector for executing identity theft attacks. In this campaign, compromised LinkedIn accounts are utilized to send messages to users with the aim of compromising their accounts by illicitly procuring their cookies, session data, and browser credentials. The […]

Cybersecurity

The Cybersecurity Resilience Quotient: Measuring Security Effectiveness

In the ever-changing landscape of cybersecurity, where threats morph, adversaries grow increasingly sophisticated, and new technology is adopted at ever greater speed, organizations are continually challenged to evaluate the effectiveness of their defenses. Traditional metrics such as the raw number of security incidents, mean time to detect, mean time to respond, or mean time to […]

Cybersecurity

Hello Alfred app exposes user data

Hello Alfred app exposes user data Pierluigi Paganini October 27, 2023 Hello Alfred, an in-home hospitality app, left a database accessible without password protection, exposing almost 170,000 records containing private user data. Hello Alfred is a one-stop application allowing real estate developers and property managers to provide in-home services and maintenance to residents. It also enables […]

Cybersecurity

Rising Global Tensions Could Portend Destructive Hacks

Critical Infrastructure Security , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime CISA’s Goldstein Says Critical Infrastructure Should ‘Remain on Heightened Alert’ Chris Riotta (@chrisriotta) • October 25, 2023     Image: Shutterstock U.S. government agencies and private sector organizations should “remain on heightened alert” for disruptive cyberattacks targeting critical infrastructure and key sectors […]